Skills/ClawHub/voidmob

voidmob@1.0.0

VERIFIED

Publisher claims: "Receive an SMS verification code (OTP) on a real US non-VoIP mobile number, rent a number for days or keep a private dedicated number (several countries, SMS from any service), route traffic through a 4G/5G mobile carrier IP in a chosen country (rotating or dedicated proxy, HTTP or SOCKS5), or buy an eSIM data plan for mobile data abroad. Paid from a prepaid USD balance the user funds with crypto. Use when the user needs a phone number to receive a verification code for their own account, a mobile IP by country (an alternative to residential proxies), or travel data. Calls the VoidMob REST API with curl (or the @voidmob/mcp tools). Requires VOIDMOB_API_KEY and the user's approval before every purchase." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher voidmob · joined 5 days agoInstalls 216Last detonated 5d ago
$clawhub install voidmob
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:56 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06

No other findings across 752 lines in 7 files.